Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2025-22866 · Microsoft / collected KEV context

EUVD-2025-3034

GHSA-3whm-j4xm-rv8x

GO-2025-3447

BIT-golang-2025-22866

cve-program · CVE-2025-22866

• https://go.dev/cl/643735
• https://go.dev/issue/71383
• https://groups.google.com/g/golang-announce/c/xU1ZCHUZw3k
• https://pkg.go.dev/vuln/GO-2025-3447

euvd · EUVD-2025-3034

• https://go.dev/cl/643735
• https://go.dev/issue/71383
• https://groups.google.com/g/golang-announce/c/xU1ZCHUZw3k
• https://pkg.go.dev/vuln/GO-2025-3447

nvd · CVE-2025-22866

• https://go.dev/cl/643735
• https://go.dev/issue/71383
• https://groups.google.com/g/golang-announce/c/xU1ZCHUZw3k
• https://pkg.go.dev/vuln/GO-2025-3447
• https://security.netapp.com/advisory/ntap-20250221-0002/

osv · GO-2025-3447

• https://go.dev/cl/643735
• https://go.dev/issue/71383
• https://groups.google.com/g/golang-announce/c/xU1ZCHUZw3k

• Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe… · Advisory content revised · 9 Nov 2026
• Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe… · Advisory content revised · 5 Nov 2026
• Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe… · Advisory content revised · 31 Oct 2026
• Release 2025-06-17 · Tool release · 20 Jun 2025
• Release 2025-04-06 · Tool release · 10 Apr 2025